{"repo":"disclose/research-threats","free":true,"listed":false,"github":"https://github.com/disclose/research-threats","clone":"git clone https://github.com/disclose/research-threats.git","description":"Collection of legal threats against good faith Security Researchers; vulnerability disclosure gone wrong. A continuation of work started by @attritionorg","language":"CSS","stars":328,"topics":["news","security","legal","advisories","cybersecurity","vulnerability"],"license":"CC0-1.0","category":"security-tools","readme_excerpt":"Research Threats Legal threats against good-faith security researchers — an open-source archive of vulnerability disclosure gone wrong. Part of the disclose.io Project — the open, vendor-neutral infrastructure for vulnerability disclosure. Browse the ecosystem → --- An ongoing, open-source collection of legal threats made against security researchers — over-reactions, demands, and cease-&-desist letters against good-faith research. In homage to, and continuing, @attritionorg's work documenting historical researcher threats. 📖 Read it on the web: threats.disclose.io · 🐙 On GitHub: disclose/research-threats Includes many historical legal events copied with permission from @attritionorg, originally at https://attrition.org/errata/legal threats/, which is still maintained. Crowd-sourcing this data through this repository is strongly recommended by all parties. It doesn't matter that just about every company and product ships with vulnerabilities; security should be built into a product, rather than applied as a band-aid solution. Secure products are better, and a responsive security team should be an integral part of the development life cycle of that product. Vulnerabilities will happen; the response to those reports are what is important. Burning bridges and dismissing the good will of researchers offering to help secure your products does not benefit anyone. Is an incident missing from this list or want us to investigate? Create an issue :) If you want to submit something mo","default_branch":null,"files":null,"tree":[],"storefront":"/r/disclose","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/disclose/research-threats/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}